last executing test programs: 10.327607336s ago: executing program 1 (id=3767): io_uring_setup(0x497c, &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000004c0)={0x20003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) io_uring_setup(0x3055, &(0x7f00000001c0)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) gettid() r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chown(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x8f, &(0x7f0000000540)={@broadcast, @random="e23dfb9c6ac7", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x19, 0x4, 0x1, 0x2, 0x0, 0x66, 0x9, 0x6, 0x89, 0xfff, @loopback, @multicast2, {[@rr={0x7, 0x27, 0xcb, [@empty, @remote, @multicast2, @loopback, @rand_addr=0x64010101, @loopback, @empty, @rand_addr, @empty]}, @end, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x20, 0x51, 0x0, 0x2, [0x80000000, 0x3, 0x6, 0x94a, 0x2, 0x9, 0xc8]}]}}, "c0"}}}}}, 0x0) recvmmsg(r7, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x2, 0x0, 0x0) 10.138604174s ago: executing program 3 (id=3769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r0) 8.777426737s ago: executing program 3 (id=3773): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0], 0xf4}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=@raw=[@printk], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1a, &(0x7f0000000340)=@raw=[@jmp, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @ringbuf_query, @jmp, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x34}}, 0x0) 8.713945259s ago: executing program 0 (id=3774): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 8.260747113s ago: executing program 0 (id=3776): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000000240)=0x800, 0x4) 7.367214461s ago: executing program 3 (id=3777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r0, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 7.198635167s ago: executing program 0 (id=3779): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x902, &(0x7f0000000080), 0x4) 6.80849032s ago: executing program 0 (id=3781): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000300), &(0x7f00000000c0)=0x4) 6.591337376s ago: executing program 1 (id=3782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0xdf}, 0xb) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x42, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20181, 0x0, 0x0) 6.526821157s ago: executing program 0 (id=3783): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x5fb}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000380)=""/254, 0xfe}, {0x0}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002f80)=""/194, 0xc2}], 0x8, &(0x7f0000002e80)=""/175, 0xaf}, 0xfffffffe}], 0x2, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r7}, 0x10) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000002b40)=ANY=[@ANYRES32, @ANYBLOB="00000000008000000000000000200000000000005fb281a8da1483336b21a10ab22901532ee5ea3fa78ce952bc31bd2311e999b460547e5847b247f42dd0f879f85c726b80ec3ada794f9b24c41362907a6ed491c1493b8012a1c3502bad8a7d710560ae9f495c782094c52b7df21a7800c960815e30b78cae3e5e4c861f7af7f9bd42c2736f38a5114ab7c94412a709139d9aad65cd253daf19b8b0532e6a88fb34d4a0cc8f81c5a98aab0f1d5ec1cc6c2502597948d4e02e3849cefe34d6b3eafddd40bef2dbb4364bf6d2b51757eb920e4cb35cad17bd11476427c2986d7783a5d13a0a1617332712c934744e1a54"]) r9 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, 0x0) ppoll(&(0x7f0000002980)=[{r5, 0x1}, {r8, 0x2180}, {r9, 0x52}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c6, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x6], 0x0, 0x40003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getpid() 6.514704324s ago: executing program 2 (id=3784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r0) 6.322913696s ago: executing program 1 (id=3786): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x0, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6.046913596s ago: executing program 4 (id=3787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff181100", @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000109"], 0x24}}, 0x0) 5.115085016s ago: executing program 1 (id=3788): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0], 0xf4}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=@raw=[@printk], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1a, &(0x7f0000000340)=@raw=[@jmp, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @ringbuf_query, @jmp, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x34}}, 0x0) 5.086641251s ago: executing program 3 (id=3789): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000000240)=0x800, 0x4) shutdown(r0, 0x0) 5.011329039s ago: executing program 2 (id=3790): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000b40)=""/127, 0x7f}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 3.858835741s ago: executing program 4 (id=3791): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e33000000080015", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 3.766817033s ago: executing program 2 (id=3792): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007916910000000000c300000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) pipe2$9p(&(0x7f0000002180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f0000000280)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000f21000/0x8000)=nil, 0x8000, 0x8) 3.766176926s ago: executing program 3 (id=3793): io_uring_setup(0x497c, &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000004c0)={0x20003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) io_uring_setup(0x3055, &(0x7f00000001c0)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) gettid() r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chown(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x8f, &(0x7f0000000540)={@broadcast, @random="e23dfb9c6ac7", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x19, 0x4, 0x1, 0x2, 0x0, 0x66, 0x9, 0x6, 0x89, 0xfff, @loopback, @multicast2, {[@rr={0x7, 0x27, 0xcb, [@empty, @remote, @multicast2, @loopback, @rand_addr=0x64010101, @loopback, @empty, @rand_addr, @empty]}, @end, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x20, 0x51, 0x0, 0x2, [0x80000000, 0x3, 0x6, 0x94a, 0x2, 0x9, 0xc8]}]}}, "c0"}}}}}, 0x0) recvmmsg(r7, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x2, 0x0, 0x0) 2.635054738s ago: executing program 2 (id=3794): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000240)={0x4, 0xfe01, 0x4}, 0x8) 2.627288194s ago: executing program 4 (id=3795): socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0xfffffff2, 0x0) socket$unix(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) listen(r0, 0x24e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) fstat(r0, &(0x7f0000000140)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010103}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xa1}, &(0x7f0000000300)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000000440)=""/158, 0x9e}], 0x1}}], 0x90}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') socket(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r6}, 0x10) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.583573914s ago: executing program 1 (id=3796): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfd, 0x2}}}}}}, 0x0) 2.270943885s ago: executing program 2 (id=3797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff0000000100000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x1d, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0x4}}]}]}, 0x48}}, 0x0) 2.264343052s ago: executing program 0 (id=3798): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = add_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$update(0x2, r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.983837473s ago: executing program 2 (id=3799): epoll_create(0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$UHID_CREATE(r0, &(0x7f0000000880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/26, 0x1a}}, 0x120) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r5 = epoll_create1(0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="2010d6000000d60801283f313239dc639acaa3542408d88aaec32e9275beb25455461c7b3e628fd5c8c64775980843a6c012bbe8a9db662c97426cd62d47841dc21fbd5c29f6f6e6ee076caef3bb115b0b9c853aff03af14fb3b4c7646a88aedf6225269b9feec094bc26f701d92200a3db3f0b1db7572db94779236b48d27107281239b96ca9465f767670e9fafb11d6a08bee263221dd670f07e88a3c9fe895911916a5722ec1a0e8c3b9d5a768d57e06c74a70f76261ffe9c392d54"], 0x0, &(0x7f0000000280)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x9, "b98399db"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xc84}}}}, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000700)={0x1a}) epoll_pwait(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000010401010000000000000002000000000a000200ffffffff0000000006000640000600000500010001"], 0x38}}, 0x0) 1.49036064s ago: executing program 1 (id=3800): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc0124000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.122873173s ago: executing program 4 (id=3801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x214, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x180, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x108, 0x6, [@m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x2d, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4dae165fc3df9c739d"}, {0xc}, {0xc}}}, @m_connmark={0x3c, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x9, 0x6, "25e3c0c965"}, {0xc}, {0xc}}}, @m_simple={0x64, 0x0, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'mcast_rejoin_count\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x214}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 676.807219ms ago: executing program 4 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r0) 80.106487ms ago: executing program 4 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r1) close(r0) 0s ago: executing program 3 (id=3804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x64) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001900)="22f2ca46b427c3116d4c3dd8af3bfff2d90f16d2863000315eca", 0x1a}, {&(0x7f0000001fc0)}], 0x2}, 0x4000) kernel console output (not intermixed with test programs): ! [ 954.942969][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.962269][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.988888][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.015229][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.076925][ T5237] Bluetooth: hci4: command tx timeout [ 955.082430][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.093357][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.105865][T15337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.417632][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.462452][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.473798][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.492456][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.523959][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.554876][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.574474][T15337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.585666][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.598384][T15337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.847305][T15337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.869310][T15337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.880706][T15337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.886994][T15645] netlink: 'syz.1.3104': attribute type 4 has an invalid length. [ 955.897794][T15337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.119983][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.132362][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.141006][T15552] bridge_slave_0: entered allmulticast mode [ 956.181106][T15552] bridge_slave_0: entered promiscuous mode [ 956.194706][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.212060][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.219489][T15552] bridge_slave_1: entered allmulticast mode [ 956.242965][T15552] bridge_slave_1: entered promiscuous mode [ 956.297248][T10019] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 956.339193][T15552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.389299][T15552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.482802][ T2474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.496668][ T2474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.496703][T10019] usb 4-1: Using ep0 maxpacket: 16 [ 956.525945][T15552] team0: Port device team_slave_0 added [ 956.545400][T10019] usb 4-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 956.566738][T10019] usb 4-1: config 0 has an invalid interface number: 153 but max is 97 [ 956.582036][T15552] team0: Port device team_slave_1 added [ 956.622017][T10019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 956.686878][T10302] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 956.687793][T10019] usb 4-1: config 0 has no interface number 0 [ 956.876915][T10302] usb 5-1: Using ep0 maxpacket: 8 [ 956.962406][T10019] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 956.987215][T10302] usb 5-1: unable to get BOS descriptor or descriptor too short [ 957.016256][T10302] usb 5-1: config 0 has an invalid interface number: 125 but max is 2 [ 957.024802][T10302] usb 5-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 957.035101][T10019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.035421][T10302] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 957.053956][T10302] usb 5-1: config 0 has no interface number 0 [ 957.060427][T10302] usb 5-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.070619][T10019] usb 4-1: Product: syz [ 957.076373][T10302] usb 5-1: config 0 interface 125 has no altsetting 0 [ 957.121848][T10019] usb 4-1: Manufacturer: syz [ 957.131869][T10302] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 957.137182][T10019] usb 4-1: SerialNumber: syz [ 957.141113][T10302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.156427][T10302] usb 5-1: Product: syz [ 957.160856][T10302] usb 5-1: Manufacturer: syz [ 957.165021][T10019] usb 4-1: config 0 descriptor?? [ 957.173425][T10302] usb 5-1: SerialNumber: syz [ 957.199333][ T5237] Bluetooth: hci4: command tx timeout [ 957.300110][T10302] usb 5-1: config 0 descriptor?? [ 957.373088][T10019] sierra 4-1:0.153: Sierra USB modem converter detected [ 957.816460][T10302] hub 5-1:0.125: bad descriptor, ignoring hub [ 957.827281][T10302] hub 5-1:0.125: probe with driver hub failed with error -5 [ 957.848227][T10302] usb 5-1: Found UVC 15.ff device syz (17dc:0202) [ 957.854945][T10302] usb 5-1: No valid video chain found. [ 957.920268][T10302] usb 5-1: USB disconnect, device number 28 [ 969.137314][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.275175][T15552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.163296][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.743150][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.796345][T15552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.614217][T15552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.866816][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.986268][T15552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.767028][ T940] usb 4-1: USB disconnect, device number 23 [ 975.027756][ T940] sierra 4-1:0.153: device disconnected [ 976.630571][T15552] hsr_slave_0: entered promiscuous mode [ 977.043920][T15552] hsr_slave_1: entered promiscuous mode [ 977.273750][T15552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.419792][T15552] Cannot create hsr debugfs directory [ 993.732315][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.769569][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.783830][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1030.830368][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1030.840962][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1030.871684][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1030.899772][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1030.911413][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1030.913767][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1030.927083][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1030.937193][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1031.016319][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1031.046470][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1031.076350][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1031.520239][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1031.533526][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1031.543572][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.555128][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1031.564370][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1031.573508][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1032.398403][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1032.414186][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1032.424611][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1032.435950][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1032.468923][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1032.482832][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1032.494998][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1032.499429][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1032.513284][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1032.523683][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1032.532517][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1032.557786][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1032.764431][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.971939][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.156300][ T5226] Bluetooth: hci0: command tx timeout [ 1033.178097][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.237102][ T5226] Bluetooth: hci5: command tx timeout [ 1033.362184][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.638264][ T5226] Bluetooth: hci3: command tx timeout [ 1033.967479][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1033.987717][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1033.997864][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1034.007269][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1034.017085][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1034.026762][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1034.508987][ T52] bridge_slave_1: left allmulticast mode [ 1034.514701][ T52] bridge_slave_1: left promiscuous mode [ 1034.529388][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.541844][ T52] bridge_slave_0: left allmulticast mode [ 1034.548088][ T52] bridge_slave_0: left promiscuous mode [ 1034.553943][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.597940][ T5226] Bluetooth: hci2: command tx timeout [ 1034.599849][ T54] Bluetooth: hci1: command tx timeout [ 1035.208372][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.220180][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.231795][ T52] bond0 (unregistering): Released all slaves [ 1035.250137][T15698] chnl_net:caif_netlink_parms(): no params data found [ 1035.317125][ T54] Bluetooth: hci5: command tx timeout [ 1035.448561][T15703] chnl_net:caif_netlink_parms(): no params data found [ 1035.517492][T15698] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1035.716726][ T54] Bluetooth: hci3: command tx timeout [ 1036.010819][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.036243][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.046628][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.058976][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.091068][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1036.101914][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.130251][ T5240] Bluetooth: hci4: command tx timeout [ 1036.553120][T15703] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1036.676525][ T5226] Bluetooth: hci1: command tx timeout [ 1036.678267][ T54] Bluetooth: hci2: command tx timeout [ 1036.738103][ T52] hsr_slave_0: left promiscuous mode [ 1036.766445][ T52] hsr_slave_1: left promiscuous mode [ 1036.783134][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.796240][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.818682][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.836627][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.935212][ T52] veth1_macvtap: left promiscuous mode [ 1036.965679][ T52] veth0_macvtap: left promiscuous mode [ 1036.971822][ T52] veth1_vlan: left promiscuous mode [ 1036.977339][ T52] veth0_vlan: left promiscuous mode [ 1037.173306][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1037.185111][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1037.195007][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1037.217238][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1037.228468][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1037.246351][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1038.201096][ T5226] Bluetooth: hci4: command tx timeout [ 1038.202382][ T54] Bluetooth: hci0: command tx timeout [ 1038.229854][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1038.294560][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1038.761901][ T54] Bluetooth: hci2: command tx timeout [ 1038.766276][ T5226] Bluetooth: hci1: command tx timeout [ 1038.924574][T15709] chnl_net:caif_netlink_parms(): no params data found [ 1039.233614][T15711] chnl_net:caif_netlink_parms(): no params data found [ 1039.316606][ T5226] Bluetooth: hci5: command tx timeout [ 1039.404787][T15709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.416371][T15709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.423680][T15709] bridge_slave_0: entered allmulticast mode [ 1039.444001][T15709] bridge_slave_0: entered promiscuous mode [ 1039.547276][T15709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.554470][T15709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.574936][T15709] bridge_slave_1: entered allmulticast mode [ 1039.584087][T15709] bridge_slave_1: entered promiscuous mode [ 1039.909226][T15709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.019704][T15709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.191896][T15709] team0: Port device team_slave_0 added [ 1040.200962][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.209840][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.218682][T15711] bridge_slave_0: entered allmulticast mode [ 1040.227565][T15711] bridge_slave_0: entered promiscuous mode [ 1040.247319][T15709] team0: Port device team_slave_1 added [ 1040.253541][T15750] chnl_net:caif_netlink_parms(): no params data found [ 1040.277028][ T5226] Bluetooth: hci0: command tx timeout [ 1040.277036][ T54] Bluetooth: hci4: command tx timeout [ 1040.283284][T15720] chnl_net:caif_netlink_parms(): no params data found [ 1040.301442][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.308904][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.316693][T15711] bridge_slave_1: entered allmulticast mode [ 1040.328541][T15711] bridge_slave_1: entered promiscuous mode [ 1040.448735][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.520627][T15709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.547029][T15709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.589490][T15709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.705797][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.785964][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.837174][ T54] Bluetooth: hci2: command tx timeout [ 1040.846660][ T54] Bluetooth: hci1: command tx timeout [ 1040.853469][T15709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.861862][T15709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.888147][T15709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.984065][T15711] team0: Port device team_slave_0 added [ 1041.009859][T15711] team0: Port device team_slave_1 added [ 1041.162596][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.209940][T15750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.218184][T15750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.225465][T15750] bridge_slave_0: entered allmulticast mode [ 1041.234283][T15750] bridge_slave_0: entered promiscuous mode [ 1041.249012][T15750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.256245][T15750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.263516][T15750] bridge_slave_1: entered allmulticast mode [ 1041.271837][T15750] bridge_slave_1: entered promiscuous mode [ 1041.376973][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.383954][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.410997][ T54] Bluetooth: hci5: command tx timeout [ 1041.419481][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.452399][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.578872][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.611448][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.618731][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.645186][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.687484][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.701217][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.729633][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.737549][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.744767][T15720] bridge_slave_0: entered allmulticast mode [ 1041.752010][T15720] bridge_slave_0: entered promiscuous mode [ 1041.763151][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.770946][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.778990][T15720] bridge_slave_1: entered allmulticast mode [ 1041.787160][T15720] bridge_slave_1: entered promiscuous mode [ 1041.799205][T15709] hsr_slave_0: entered promiscuous mode [ 1041.805709][T15709] hsr_slave_1: entered promiscuous mode [ 1041.812676][T15709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.820581][T15709] Cannot create hsr debugfs directory [ 1041.924817][T15750] team0: Port device team_slave_0 added [ 1042.004494][T15750] team0: Port device team_slave_1 added [ 1042.053125][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.109326][T15711] hsr_slave_0: entered promiscuous mode [ 1042.115824][T15711] hsr_slave_1: entered promiscuous mode [ 1042.125084][T15711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.132755][T15711] Cannot create hsr debugfs directory [ 1042.143000][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.206051][T15773] chnl_net:caif_netlink_parms(): no params data found [ 1042.297211][T15720] team0: Port device team_slave_0 added [ 1042.328423][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.335417][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.362682][ T54] Bluetooth: hci4: command tx timeout [ 1042.371749][ T5226] Bluetooth: hci0: command tx timeout [ 1042.383096][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.450620][T15720] team0: Port device team_slave_1 added [ 1042.538614][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.545598][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.573292][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.741200][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.792055][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.800182][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.826766][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.921988][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.937613][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.944588][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.993244][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.107766][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.213172][T15750] hsr_slave_0: entered promiscuous mode [ 1043.220180][T15750] hsr_slave_1: entered promiscuous mode [ 1043.226993][T15750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.234579][T15750] Cannot create hsr debugfs directory [ 1043.284987][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.404261][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.413987][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.421577][T15773] bridge_slave_0: entered allmulticast mode [ 1043.431653][T15773] bridge_slave_0: entered promiscuous mode [ 1043.447342][T15720] hsr_slave_0: entered promiscuous mode [ 1043.454442][T15720] hsr_slave_1: entered promiscuous mode [ 1043.461442][T15720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.471173][T15720] Cannot create hsr debugfs directory [ 1043.488645][ T54] Bluetooth: hci5: command tx timeout [ 1043.528863][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.536970][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.544218][T15773] bridge_slave_1: entered allmulticast mode [ 1043.552388][T15773] bridge_slave_1: entered promiscuous mode [ 1043.700778][T15773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.720813][T15773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.914966][T15773] team0: Port device team_slave_0 added [ 1044.017408][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.039953][T15773] team0: Port device team_slave_1 added [ 1044.184098][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.289615][T15773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.298092][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.330805][T15773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.343411][T15773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.350613][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.377182][T15773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.430856][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.447381][ T54] Bluetooth: hci0: command tx timeout [ 1044.555087][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.577267][T15709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1044.651883][T15709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1044.753532][T15773] hsr_slave_0: entered promiscuous mode [ 1044.777062][T15773] hsr_slave_1: entered promiscuous mode [ 1044.786043][T15773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.794087][T15773] Cannot create hsr debugfs directory [ 1044.800226][T15709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1044.949813][T15709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1045.381158][T15750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1045.446726][ T52] bridge_slave_1: left allmulticast mode [ 1045.452418][ T52] bridge_slave_1: left promiscuous mode [ 1045.487759][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.498753][ T52] bridge_slave_0: left allmulticast mode [ 1045.504441][ T52] bridge_slave_0: left promiscuous mode [ 1045.512051][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.525840][ T52] bridge_slave_1: left allmulticast mode [ 1045.536284][ T52] bridge_slave_1: left promiscuous mode [ 1045.557222][ T54] Bluetooth: hci5: command tx timeout [ 1045.563066][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.590749][ T52] bridge_slave_0: left allmulticast mode [ 1045.596804][ T52] bridge_slave_0: left promiscuous mode [ 1045.602656][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.634929][ T52] bridge_slave_1: left allmulticast mode [ 1045.642063][ T52] bridge_slave_1: left promiscuous mode [ 1045.649661][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.662181][ T52] bridge_slave_0: left allmulticast mode [ 1045.669239][ T52] bridge_slave_0: left promiscuous mode [ 1045.674939][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.689774][ T52] bridge_slave_1: left allmulticast mode [ 1045.695723][ T52] bridge_slave_1: left promiscuous mode [ 1045.703901][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.716036][ T52] bridge_slave_0: left allmulticast mode [ 1045.722845][ T52] bridge_slave_0: left promiscuous mode [ 1045.729227][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.282129][ T52] bond0 (unregistering): Released all slaves [ 1047.302771][ T52] bond0 (unregistering): Released all slaves [ 1047.320234][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.338563][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.362255][ T52] bond0 (unregistering): Released all slaves [ 1047.560966][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.572546][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.584763][ T52] bond0 (unregistering): Released all slaves [ 1047.771608][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.784549][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.797652][ T52] bond0 (unregistering): Released all slaves [ 1047.985178][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.997794][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.012820][ T52] bond0 (unregistering): Released all slaves [ 1048.095911][T15750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1048.517526][T15750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1048.607000][T15750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1048.793610][T15709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.935436][T15709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.997513][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.004788][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.086613][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.093818][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.252569][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.261719][T15711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1049.274647][T15711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1049.386276][T15711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1049.431341][T15711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1049.664447][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.942774][ T52] hsr_slave_0: left promiscuous mode [ 1049.986246][ T52] hsr_slave_1: left promiscuous mode [ 1050.010163][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.022198][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.057527][ T52] hsr_slave_0: left promiscuous mode [ 1050.079086][ T52] hsr_slave_1: left promiscuous mode [ 1050.085638][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.107828][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.127951][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.135451][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.177183][ T52] hsr_slave_0: left promiscuous mode [ 1050.187226][ T52] hsr_slave_1: left promiscuous mode [ 1050.207039][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.214540][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.237599][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.245191][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.282762][ T52] hsr_slave_0: left promiscuous mode [ 1050.298601][ T52] hsr_slave_1: left promiscuous mode [ 1050.304750][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.313157][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.322001][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.331762][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.405110][ T52] veth1_macvtap: left promiscuous mode [ 1050.411035][ T52] veth0_macvtap: left promiscuous mode [ 1050.417018][ T52] veth1_vlan: left promiscuous mode [ 1050.422351][ T52] veth0_vlan: left promiscuous mode [ 1050.429605][ T52] veth1_macvtap: left promiscuous mode [ 1050.435142][ T52] veth0_macvtap: left promiscuous mode [ 1050.441222][ T52] veth1_vlan: left promiscuous mode [ 1050.454612][ T52] veth0_vlan: left promiscuous mode [ 1050.462302][ T52] veth1_macvtap: left promiscuous mode [ 1050.468154][ T52] veth0_macvtap: left promiscuous mode [ 1050.475957][ T52] veth1_vlan: left promiscuous mode [ 1050.481508][ T52] veth0_vlan: left promiscuous mode [ 1051.344928][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1051.402541][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1052.245667][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1052.310863][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1053.614131][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1053.682458][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1054.977973][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1055.043220][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1055.164046][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.176616][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.730570][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.738057][ T975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.748350][ T975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.755656][ T975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.245126][T15709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.327509][T15720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1056.419019][T15720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1056.445423][T15720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1056.497740][T15720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1056.628078][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.846858][T15773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1056.860552][T15773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1056.915708][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.926033][T15773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1056.980422][T15709] veth0_vlan: entered promiscuous mode [ 1057.013503][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.020744][ T8473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.043689][T15773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1057.161597][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.168953][ T8473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.220885][T15709] veth1_vlan: entered promiscuous mode [ 1057.258713][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.709536][T15709] veth0_macvtap: entered promiscuous mode [ 1057.730043][T15750] veth0_vlan: entered promiscuous mode [ 1057.768251][T15709] veth1_macvtap: entered promiscuous mode [ 1057.787463][T15750] veth1_vlan: entered promiscuous mode [ 1057.824278][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.952996][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.012367][T15773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.105229][T15709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.121931][T15709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.134487][T15709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.213440][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.220720][ T8473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.232194][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.239506][ T8473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.284221][T15709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.307573][T15709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.328914][T15709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.430492][T15709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.456521][T15709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.465279][T15709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.484969][T15709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.522780][T15773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.553642][T15750] veth0_macvtap: entered promiscuous mode [ 1058.615901][T15750] veth1_macvtap: entered promiscuous mode [ 1058.643977][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.651258][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.735977][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.770333][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.777617][ T8473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.824749][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.837550][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.848012][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.861205][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.873645][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.925015][T15720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.945291][T15720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.032276][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.062453][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.087096][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.099864][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.123072][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.225143][T15750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.244638][T15750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.254293][T15750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.264765][T15750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.354723][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.375433][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.591554][T15711] veth0_vlan: entered promiscuous mode [ 1059.619070][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.651007][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.657876][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.785876][T15711] veth1_vlan: entered promiscuous mode [ 1059.969406][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.007672][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.175309][T15720] veth0_vlan: entered promiscuous mode [ 1060.251931][T15711] veth0_macvtap: entered promiscuous mode [ 1060.268017][T15668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.275879][T15668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.285200][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.330876][T15711] veth1_macvtap: entered promiscuous mode [ 1060.395013][T15720] veth1_vlan: entered promiscuous mode [ 1060.450940][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.472775][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.486282][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.505769][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.531317][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.550380][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.577264][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.648981][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.693017][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.734639][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.762026][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.773854][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.792886][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.815565][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.000998][T15711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.057976][T15711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.090175][T15711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.099833][T15711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.890767][T15720] veth0_macvtap: entered promiscuous mode [ 1061.936568][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1062.033639][T15720] veth1_macvtap: entered promiscuous mode [ 1062.073771][T15773] veth0_vlan: entered promiscuous mode [ 1062.146471][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1062.155640][ T8] usb 4-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 1062.185479][ T8] usb 4-1: config 0 has an invalid interface number: 153 but max is 97 [ 1062.188347][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.211356][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.222787][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 1062.223010][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.244773][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.255484][ T8] usb 4-1: config 0 has no interface number 0 [ 1062.255585][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.273241][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.277564][ T8] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 1062.283777][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.303555][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.306593][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.315754][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.334586][T15773] veth1_vlan: entered promiscuous mode [ 1062.346224][ T8] usb 4-1: Product: syz [ 1062.350621][ T8] usb 4-1: Manufacturer: syz [ 1062.355283][ T8] usb 4-1: SerialNumber: syz [ 1062.364537][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.385414][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.393871][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.418169][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.418244][ T8] usb 4-1: config 0 descriptor?? [ 1062.434675][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.452226][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.455477][ T8] sierra 4-1:0.153: Sierra USB modem converter detected [ 1062.468689][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.488133][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.503839][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.523334][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.535697][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.578912][T15720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.589129][T15720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.600287][T15720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.609858][T15720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.722267][ T8] usb 4-1: USB disconnect, device number 24 [ 1062.753853][ T8] sierra 4-1:0.153: device disconnected [ 1062.823867][ T8473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.853045][ T8473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.867383][T15773] veth0_macvtap: entered promiscuous mode [ 1062.961506][T15773] veth1_macvtap: entered promiscuous mode [ 1063.090717][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.147519][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.184373][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.219152][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.252126][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.283085][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.303454][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.326287][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.386167][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.406993][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.456239][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.537169][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.597967][T15773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.682372][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1063.712311][T15990] netlink: 3224 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1063.773951][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.805637][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.821608][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.846173][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.858127][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.879707][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.911233][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.945284][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.976912][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.996249][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.020371][T15773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.031337][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.061932][T15773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.080968][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.093195][T15773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.105452][T15773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.118223][T15773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.029177][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.066386][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.223683][ T2466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.434647][ T2466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.547075][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.561000][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.670345][ T2466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.999672][ T2466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.173694][ T29] audit: type=1400 audit(1723334054.844:943): avc: denied { getopt } for pid=16017 comm="syz.4.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1066.199821][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1066.296707][ T29] audit: type=1400 audit(1723334054.844:944): avc: denied { ioctl } for pid=16017 comm="syz.4.3154" path="socket:[64314]" dev="sockfs" ino=64314 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1066.483592][T16025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1066.527943][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1066.546822][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1066.555847][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1066.565977][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.574022][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1066.582653][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1066.599805][T16025] netlink: 3224 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1066.877281][ T2466] bridge_slave_1: left allmulticast mode [ 1066.885378][ T2466] bridge_slave_1: left promiscuous mode [ 1066.896481][ T2466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.002823][ T2466] bridge_slave_0: left allmulticast mode [ 1067.022339][ T2466] bridge_slave_0: left promiscuous mode [ 1067.049310][ T2466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.315378][ T2466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.332823][ T2466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.354532][ T2466] bond0 (unregistering): Released all slaves [ 1068.676971][ T54] Bluetooth: hci2: command tx timeout [ 1069.619583][T16090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1069.713918][T16090] netlink: 3224 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1069.969204][ T2466] hsr_slave_0: left promiscuous mode [ 1069.991757][ T2466] hsr_slave_1: left promiscuous mode [ 1070.104132][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.124186][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.177157][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.227811][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.322192][ T2466] veth1_macvtap: left promiscuous mode [ 1070.368901][ T2466] veth0_macvtap: left promiscuous mode [ 1070.374672][ T2466] veth1_vlan: left promiscuous mode [ 1070.405940][ T2466] veth0_vlan: left promiscuous mode [ 1070.761159][ T54] Bluetooth: hci2: command tx timeout [ 1072.706931][ T2466] team0 (unregistering): Port device team_slave_1 removed [ 1072.845423][ T54] Bluetooth: hci2: command tx timeout [ 1072.876608][ T2466] team0 (unregistering): Port device team_slave_0 removed [ 1074.916980][ T54] Bluetooth: hci2: command tx timeout [ 1075.129227][T16024] chnl_net:caif_netlink_parms(): no params data found [ 1075.584032][T16024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.605544][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.635939][T16024] bridge_slave_0: entered allmulticast mode [ 1075.686447][T16024] bridge_slave_0: entered promiscuous mode [ 1075.732883][T16024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.768129][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.775440][T16024] bridge_slave_1: entered allmulticast mode [ 1075.824175][T16024] bridge_slave_1: entered promiscuous mode [ 1076.083985][T16024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.136706][T16024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.475685][T16024] team0: Port device team_slave_0 added [ 1076.520988][T16024] team0: Port device team_slave_1 added [ 1076.688969][T16024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.713323][T16024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.775254][T16024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.843469][T16024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.858475][T16024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.902749][T16024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.200730][T16024] hsr_slave_0: entered promiscuous mode [ 1077.225549][T16024] hsr_slave_1: entered promiscuous mode [ 1077.640182][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1077.996528][ T3638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.189760][ T3638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.502483][ T3638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.399255][ T3638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.138359][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1080.145756][ T29] audit: type=1400 audit(1723334068.814:945): avc: denied { ioctl } for pid=16251 comm="syz.3.3236" path="socket:[64713]" dev="sockfs" ino=64713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1080.177230][ T29] audit: type=1400 audit(1723334068.844:946): avc: denied { bind } for pid=16251 comm="syz.3.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1080.178834][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1080.214370][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1080.257026][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1080.267120][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1080.274647][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.333177][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1080.397904][ T29] audit: type=1400 audit(1723334069.064:947): avc: denied { ioctl } for pid=16258 comm="syz.3.3239" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1080.869321][ T29] audit: type=1400 audit(1723334069.544:948): avc: denied { setattr } for pid=16272 comm="syz.0.3243" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1080.908381][ T940] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1080.951379][ T3638] bridge_slave_1: left allmulticast mode [ 1080.966670][ T3638] bridge_slave_1: left promiscuous mode [ 1080.993199][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.041702][ T3638] bridge_slave_0: left allmulticast mode [ 1081.064518][ T3638] bridge_slave_0: left promiscuous mode [ 1081.080005][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.107522][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 1081.133631][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.134273][T16283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=16283 comm=syz.3.3246 [ 1081.155658][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.180551][ T940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1081.224431][ T940] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1081.245822][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.269378][ T940] usb 5-1: config 0 descriptor?? [ 1081.710663][ T940] itetech 0003:048D:8595.001A: unknown main item tag 0x0 [ 1081.721421][ T940] itetech 0003:048D:8595.001A: unknown main item tag 0x0 [ 1081.730445][ T940] itetech 0003:048D:8595.001A: unknown main item tag 0x0 [ 1081.751368][ T940] itetech 0003:048D:8595.001A: unknown main item tag 0x0 [ 1081.758588][ T940] itetech 0003:048D:8595.001A: unknown main item tag 0x0 [ 1081.795771][ T940] itetech 0003:048D:8595.001A: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 1082.046902][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.076804][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.101248][ T3638] bond0 (unregistering): Released all slaves [ 1082.357921][ T5226] Bluetooth: hci3: command tx timeout [ 1082.736563][ T940] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1082.832411][ T3638] hsr_slave_0: left promiscuous mode [ 1082.850852][ T3638] hsr_slave_1: left promiscuous mode [ 1082.862248][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.869937][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.886062][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.899610][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.926440][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 1082.944772][ T940] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1082.954692][ T29] audit: type=1400 audit(1723334071.634:949): avc: denied { write } for pid=16315 comm="syz.3.3261" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1082.982339][ T3638] veth1_macvtap: left promiscuous mode [ 1082.995886][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.004220][ T3638] veth0_macvtap: left promiscuous mode [ 1083.014460][ T3638] veth1_vlan: left promiscuous mode [ 1083.021286][ T940] usb 1-1: Product: syz [ 1083.025736][ T3638] veth0_vlan: left promiscuous mode [ 1083.031347][ T940] usb 1-1: Manufacturer: syz [ 1083.036073][ T940] usb 1-1: SerialNumber: syz [ 1083.067153][ T940] usb 1-1: config 0 descriptor?? [ 1083.285461][ T940] airspy 1-1:0.0: usb_control_msg() failed -32 request 09 [ 1083.297463][ T940] airspy 1-1:0.0: Could not detect board [ 1083.303312][ T940] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 1083.627322][T10302] usb 5-1: USB disconnect, device number 29 [ 1083.755285][T16333] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3262'. [ 1084.158587][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 1084.228227][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 1084.442138][ T5226] Bluetooth: hci3: command tx timeout [ 1084.939221][T16024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1085.015339][T16024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1085.035764][T16024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1085.095049][T16024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1085.239600][T16247] chnl_net:caif_netlink_parms(): no params data found [ 1085.527819][ T8] usb 1-1: USB disconnect, device number 36 [ 1085.779364][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.798521][T16361] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3271'. [ 1085.811085][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.821232][T16247] bridge_slave_0: entered allmulticast mode [ 1085.848225][T16247] bridge_slave_0: entered promiscuous mode [ 1085.884905][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.953880][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.977332][T16247] bridge_slave_1: entered allmulticast mode [ 1086.006414][T16247] bridge_slave_1: entered promiscuous mode [ 1086.233450][T16247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.279328][T16247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.529584][ T5226] Bluetooth: hci3: command tx timeout [ 1086.740877][T16247] team0: Port device team_slave_0 added [ 1086.832443][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1087.028562][T16247] team0: Port device team_slave_1 added [ 1087.349453][T16247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.360170][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.447430][T16247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.513073][T16024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.553696][T16247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.571152][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.672566][T16247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.721967][T16397] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1087.867792][T16400] sctp: [Deprecated]: syz.3.3282 (pid 16400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1087.867792][T16400] Use struct sctp_sack_info instead [ 1087.989738][T16247] hsr_slave_0: entered promiscuous mode [ 1088.007890][T16247] hsr_slave_1: entered promiscuous mode [ 1088.014688][T16247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.045610][T16247] Cannot create hsr debugfs directory [ 1088.123327][T16024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.315015][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.322303][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.404373][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.411689][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.606413][ T5226] Bluetooth: hci3: command tx timeout [ 1088.815608][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 1090.313574][ T29] audit: type=1400 audit(1723334078.984:950): avc: denied { view } for pid=16442 comm="syz.3.3293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1090.423272][T16024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.570396][T16247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.643524][T16247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1090.705359][T16247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.791294][T16247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1090.963185][T16024] veth0_vlan: entered promiscuous mode [ 1091.019322][T16024] veth1_vlan: entered promiscuous mode [ 1091.229739][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1091.572471][T16247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.655963][T16024] veth0_macvtap: entered promiscuous mode [ 1091.759053][T16024] veth1_macvtap: entered promiscuous mode [ 1091.899261][T16247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.941991][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.973007][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.006272][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.034342][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.065041][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.103530][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.124453][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.206430][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.266695][T16024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.310884][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.318064][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.369752][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.414289][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.449073][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.463825][T16488] Bluetooth: MGMT ver 1.23 [ 1092.498945][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.553602][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.589943][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.628263][T16024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.704327][T16024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.738124][ T29] audit: type=1400 audit(1723334081.414:951): avc: denied { read write } for pid=16493 comm="syz.3.3302" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1092.793657][T16024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.855084][ T29] audit: type=1400 audit(1723334081.414:952): avc: denied { open } for pid=16493 comm="syz.3.3302" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1092.923214][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.930471][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.003687][T16024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.058127][T16024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.086217][T16024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.122262][T16024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.659784][ T943] IPVS: starting estimator thread 0... [ 1093.730615][ T29] audit: type=1400 audit(1723334082.374:953): avc: denied { open } for pid=16506 comm="syz.3.3305" path="/dev/ptyqb" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1093.805567][T16509] IPVS: using max 22 ests per chain, 52800 per kthread [ 1093.824207][ T29] audit: type=1400 audit(1723334082.484:954): avc: denied { ioctl } for pid=16506 comm="syz.3.3305" path="/dev/ptyqb" dev="devtmpfs" ino=132 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1093.849594][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.876636][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.050575][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.076398][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.329622][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.575696][T16247] veth0_vlan: entered promiscuous mode [ 1095.675574][T16247] veth1_vlan: entered promiscuous mode [ 1095.775796][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1095.996069][T16247] veth0_macvtap: entered promiscuous mode [ 1096.064703][T16247] veth1_macvtap: entered promiscuous mode [ 1096.148112][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.174791][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.208927][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.243359][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.274783][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.306249][ T29] audit: type=1400 audit(1723334084.974:955): avc: denied { map } for pid=16543 comm="syz.4.3309" path="socket:[66959]" dev="sockfs" ino=66959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1096.309255][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.380756][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.402525][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.422833][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.451601][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.478462][T16247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.582154][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.646627][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.665039][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.677921][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.692965][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.703840][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.718753][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.733271][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.760349][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.783349][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.842845][T16247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.908864][T16559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1096.990259][T16247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.033969][T16247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.071156][T16247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.103042][T16247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.460906][ T29] audit: type=1400 audit(1723334086.134:956): avc: denied { ioctl } for pid=16578 comm="syz.3.3320" path="socket:[66239]" dev="sockfs" ino=66239 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1097.708004][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3319'. [ 1097.809248][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.816840][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.030411][T16588] bridge0: entered allmulticast mode [ 1098.076809][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.090285][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.139836][T16594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.147251][T16594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.154865][T16594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.162161][T16594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.186628][T16594] bridge0: entered promiscuous mode [ 1098.317532][ T940] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1098.491130][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.529969][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.584477][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 1098.649748][ T940] usb 4-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 1098.716199][ T940] usb 4-1: config 0 has an invalid interface number: 153 but max is 97 [ 1098.733416][ T940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 1098.783413][ T940] usb 4-1: config 0 has no interface number 0 [ 1098.840222][ T940] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 1098.866253][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.914977][ T940] usb 4-1: Product: syz [ 1098.923516][ T940] usb 4-1: Manufacturer: syz [ 1098.945300][ T940] usb 4-1: SerialNumber: syz [ 1098.967637][ T29] audit: type=1400 audit(1723334087.634:957): avc: denied { write } for pid=16607 comm="syz.1.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1099.011128][ T940] usb 4-1: config 0 descriptor?? [ 1099.033888][ T940] sierra 4-1:0.153: Sierra USB modem converter detected [ 1099.310756][T16617] netlink: 'syz.1.3329': attribute type 4 has an invalid length. [ 1099.382066][ T940] usb 4-1: USB disconnect, device number 25 [ 1099.385296][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3329'. [ 1099.397371][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1099.409621][T16618] 9pnet_fd: Insufficient options for proto=fd [ 1099.427357][ T940] sierra 4-1:0.153: device disconnected [ 1100.106411][ T5308] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1100.304288][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1100.316822][ T29] audit: type=1400 audit(1723334088.984:958): avc: denied { mounton } for pid=16638 comm="syz.1.3335" path="mnt:[4026532908]" dev="nsfs" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1100.386207][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 1100.409886][ T5308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1100.439971][ T5308] usb 3-1: config 0 has an invalid interface number: 125 but max is 2 [ 1100.456969][ T5308] usb 3-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config [ 1100.505120][ T5308] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1100.542650][ T5308] usb 3-1: config 0 has no interface number 0 [ 1100.579698][ T5308] usb 3-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.612276][ T5308] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1100.642588][ T5308] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 1100.665427][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.711474][ T5308] usb 3-1: Product: syz [ 1100.756503][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1100.772627][ T5308] usb 3-1: Manufacturer: syz [ 1100.802849][ T5308] usb 3-1: SerialNumber: syz [ 1100.947455][ T5308] usb 3-1: config 0 descriptor?? [ 1100.956254][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1100.973995][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.013147][ T8] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1101.083959][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.164804][ T5308] hub 3-1:0.125: bad descriptor, ignoring hub [ 1101.165921][ T8] usb 2-1: Product: syz [ 1101.206361][ T5308] hub 3-1:0.125: probe with driver hub failed with error -5 [ 1101.242024][ T5308] usb 3-1: Found UVC 15.ff device syz (17dc:0202) [ 1101.268872][ T8] usb 2-1: Manufacturer: syz [ 1101.291677][ T8] usb 2-1: SerialNumber: syz [ 1101.310628][ T8] usb 2-1: config 0 descriptor?? [ 1101.329176][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 1101.349370][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1101.487816][ T5308] usb 3-1: No valid video chain found. [ 1101.560996][ T5308] usb 3-1: USB disconnect, device number 25 [ 1101.837898][ T29] audit: type=1400 audit(1723334090.514:959): avc: denied { create } for pid=16674 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1101.997560][T16677] netlink: 'syz.0.3342': attribute type 4 has an invalid length. [ 1102.040409][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1102.247397][ T29] audit: type=1400 audit(1723334090.924:960): avc: denied { read } for pid=16684 comm="syz.2.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1102.366773][ T29] audit: type=1400 audit(1723334091.034:961): avc: denied { listen } for pid=16674 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1102.454669][ T29] audit: type=1400 audit(1723334091.034:962): avc: denied { setopt } for pid=16674 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1102.526879][ T940] usb 2-1: USB disconnect, device number 38 [ 1102.552216][ T29] audit: type=1400 audit(1723334091.154:963): avc: denied { create } for pid=16689 comm="syz.2.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1102.659384][ T29] audit: type=1400 audit(1723334091.174:964): avc: denied { write } for pid=16689 comm="syz.2.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1103.341146][ T29] audit: type=1326 audit(1723334092.004:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.2.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4379779f9 code=0x7ffc0000 [ 1104.118926][ T29] audit: type=1326 audit(1723334092.004:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.2.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4379779f9 code=0x7ffc0000 [ 1104.143883][ T29] audit: type=1326 audit(1723334092.004:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.2.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff4379779f9 code=0x7ffc0000 [ 1104.186212][ T29] audit: type=1326 audit(1723334092.004:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.2.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4379779f9 code=0x7ffc0000 [ 1104.607834][T15556] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1104.825576][T15556] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.878653][T15556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1104.923483][T15556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1104.996274][T15556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1105.059403][T15556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1105.103319][T15556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.150292][T15556] usb 3-1: config 0 descriptor?? [ 1105.180738][T16712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1105.698697][T15556] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 1105.743416][T15556] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 1105.759770][T16739] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.3358'. [ 1105.827106][T15556] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1107.316357][T15556] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1107.556923][T15556] usb 5-1: Using ep0 maxpacket: 8 [ 1107.574810][T15556] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1107.622434][T15556] usb 5-1: string descriptor 0 read error: -22 [ 1107.638008][T15556] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1107.650370][T15556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.864275][T15688] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1107.874040][T15556] usbhid 5-1:1.0: can't add hid device: -71 [ 1107.893080][T15556] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1107.928638][T15556] usb 5-1: USB disconnect, device number 30 [ 1108.096574][T15688] usb 4-1: Using ep0 maxpacket: 8 [ 1108.107438][T15688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1108.158281][T15688] usb 4-1: config 0 has an invalid interface number: 125 but max is 2 [ 1108.200326][T15688] usb 4-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 1108.237859][ T943] usb 3-1: USB disconnect, device number 26 [ 1108.256469][T15688] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1108.265403][T15688] usb 4-1: config 0 has no interface number 0 [ 1108.321817][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1108.338509][T15688] usb 4-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1108.371650][T16776] 9pnet_fd: Insufficient options for proto=fd [ 1108.436960][T15688] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1108.489389][T15688] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 1108.516951][T15688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.561445][T15688] usb 4-1: Product: syz [ 1108.581021][T15688] usb 4-1: Manufacturer: syz [ 1108.586600][T15688] usb 4-1: SerialNumber: syz [ 1108.636283][T15688] usb 4-1: config 0 descriptor?? [ 1108.642058][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1108.642077][ T29] audit: type=1326 audit(1723334097.314:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1108.932207][ T29] audit: type=1326 audit(1723334097.314:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1108.958660][T15688] hub 4-1:0.125: bad descriptor, ignoring hub [ 1108.964758][T15688] hub 4-1:0.125: probe with driver hub failed with error -5 [ 1108.969145][ T29] audit: type=1326 audit(1723334097.314:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.028790][T15688] usb 4-1: Found UVC 15.ff device syz (17dc:0202) [ 1109.070443][T15688] usb 4-1: No valid video chain found. [ 1109.112135][ T29] audit: type=1326 audit(1723334097.314:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.180834][T15688] usb 4-1: USB disconnect, device number 26 [ 1109.249523][ T29] audit: type=1326 audit(1723334097.314:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.293951][ T29] audit: type=1326 audit(1723334097.314:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.323574][ T29] audit: type=1326 audit(1723334097.314:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.465847][ T29] audit: type=1326 audit(1723334097.314:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1109.523867][ T29] audit: type=1326 audit(1723334097.314:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff571579817 code=0x7ffc0000 [ 1109.544987][T16795] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3378'. [ 1109.615378][ T29] audit: type=1326 audit(1723334097.314:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5715779f9 code=0x7ffc0000 [ 1111.271823][T16819] bridge4: entered promiscuous mode [ 1111.286281][T16819] bridge4: entered allmulticast mode [ 1111.436222][ T943] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1111.696211][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 1111.718675][ T943] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 1111.745844][ T943] usb 1-1: config 0 has an invalid interface number: 153 but max is 97 [ 1111.778102][ T943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 1111.815934][ T943] usb 1-1: config 0 has no interface number 0 [ 1111.843931][ T943] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 1111.862209][T16832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1111.886008][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.922385][ T943] usb 1-1: Product: syz [ 1111.947413][ T943] usb 1-1: Manufacturer: syz [ 1111.972721][ T943] usb 1-1: SerialNumber: syz [ 1112.048943][ T943] usb 1-1: config 0 descriptor?? [ 1112.093410][ T943] sierra 1-1:0.153: Sierra USB modem converter detected [ 1112.416798][ T943] usb 1-1: USB disconnect, device number 37 [ 1112.471995][ T943] sierra 1-1:0.153: device disconnected [ 1115.039426][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1115.039447][ T29] audit: type=1326 audit(1723334103.064:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.3396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe79779f9 code=0x0 [ 1115.356422][T15688] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1115.472052][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1115.576256][T15688] usb 3-1: Using ep0 maxpacket: 8 [ 1115.592219][T15688] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 1115.614604][T15688] usb 3-1: config 0 has no interface number 0 [ 1115.649759][T15688] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1115.676465][T15688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.684611][T15688] usb 3-1: Product: syz [ 1115.706693][T15688] usb 3-1: Manufacturer: syz [ 1115.711434][T15688] usb 3-1: SerialNumber: syz [ 1115.730944][T15688] usb 3-1: config 0 descriptor?? [ 1115.739175][ T8473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.741309][T15688] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1115.766273][T15688] pctv452e: pctv452e_power_ctrl: 1 [ 1115.766273][T15688] [ 1115.773764][T15688] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1115.773764][T15688] [ 1115.806216][T15688] dvb-usb: bulk message failed: -22 (5/0) [ 1115.844426][T15688] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-22) [ 1116.027321][ T8473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.071750][ T29] audit: type=1326 audit(1723334104.744:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.2.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4379779f9 code=0x0 [ 1116.160657][T16863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.192456][T16863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.445041][ T29] audit: type=1400 audit(1723334105.114:994): avc: denied { map } for pid=16859 comm="syz.1.3401" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1116.469191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.487960][ T8473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.491626][ T29] audit: type=1400 audit(1723334105.114:995): avc: denied { execute } for pid=16859 comm="syz.1.3401" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1116.612454][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.620713][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.687036][ T8473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.874187][ T29] audit: type=1400 audit(1723334105.544:996): avc: denied { name_bind } for pid=16870 comm="syz.4.3405" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1117.008973][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1117.025903][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1117.037957][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1117.061906][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1117.081767][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1117.091064][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1117.180757][ T8473] bridge_slave_1: left allmulticast mode [ 1117.199962][ T8473] bridge_slave_1: left promiscuous mode [ 1117.206134][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.287377][ T8473] bridge_slave_0: left allmulticast mode [ 1117.293201][ T8473] bridge_slave_0: left promiscuous mode [ 1117.312156][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.321231][ T5308] usb 3-1: USB disconnect, device number 27 [ 1118.243625][T16900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1119.157096][ T5226] Bluetooth: hci0: command tx timeout [ 1119.663956][ T8473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.685094][ T8473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.699078][ T8473] bond0 (unregistering): Released all slaves [ 1120.313397][ T940] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1120.561854][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.236575][ T5226] Bluetooth: hci0: command tx timeout [ 1121.300530][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.312123][ T940] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1121.325153][ T940] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 1121.336186][ T940] usb 1-1: Product: syz [ 1121.387818][ T940] usb 1-1: config 0 descriptor?? [ 1121.646555][ T8473] hsr_slave_0: left promiscuous mode [ 1121.696831][ T8473] hsr_slave_1: left promiscuous mode [ 1121.714514][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.746239][ T8473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.797689][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.823951][ T8473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.853303][ T940] konepure 0003:1E7D:2DB4.001C: item fetching failed at offset 10/11 [ 1121.891790][ T940] konepure 0003:1E7D:2DB4.001C: parse failed [ 1121.909984][ T940] konepure 0003:1E7D:2DB4.001C: probe with driver konepure failed with error -22 [ 1121.958797][ T8473] veth1_macvtap: left promiscuous mode [ 1121.977533][ T8473] veth0_macvtap: left promiscuous mode [ 1121.983398][ T8473] veth1_vlan: left promiscuous mode [ 1122.029672][ T8473] veth0_vlan: left promiscuous mode [ 1122.093683][T10302] usb 1-1: USB disconnect, device number 38 [ 1122.109868][T16965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1123.278536][ T29] audit: type=1400 audit(1723334111.944:997): avc: denied { connect } for pid=16982 comm="syz.2.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1123.317431][ T5226] Bluetooth: hci0: command tx timeout [ 1123.387380][T16985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1123.822303][ T8473] team0 (unregistering): Port device team_slave_1 removed [ 1123.932660][ T8473] team0 (unregistering): Port device team_slave_0 removed [ 1125.267778][T16872] chnl_net:caif_netlink_parms(): no params data found [ 1125.552170][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1125.561450][ T5226] Bluetooth: hci0: command tx timeout [ 1125.724225][T16975] veth0: entered promiscuous mode [ 1125.801653][T16975] veth0: left promiscuous mode [ 1126.704911][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.769666][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.835047][T16872] bridge_slave_0: entered allmulticast mode [ 1126.899695][T16872] bridge_slave_0: entered promiscuous mode [ 1127.025458][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.087520][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.157769][T16872] bridge_slave_1: entered allmulticast mode [ 1127.260165][T16872] bridge_slave_1: entered promiscuous mode [ 1127.500623][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.550531][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.841069][ T29] audit: type=1400 audit(1723334116.504:998): avc: denied { mounton } for pid=17033 comm="syz.1.3453" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1127.931164][T16872] team0: Port device team_slave_0 added [ 1127.980507][T16872] team0: Port device team_slave_1 added [ 1128.172224][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.192030][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.258997][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.286482][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.303713][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.406375][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.790015][T16872] hsr_slave_0: entered promiscuous mode [ 1128.886803][T16872] hsr_slave_1: entered promiscuous mode [ 1128.939145][T16872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.958226][T16872] Cannot create hsr debugfs directory [ 1129.295997][T17050] vlan2: entered promiscuous mode [ 1129.417986][T17056] No such timeout policy "syz1" [ 1129.763689][T17050] batadv0: entered promiscuous mode [ 1129.794882][T17050] batadv0: left promiscuous mode [ 1129.977098][ T29] audit: type=1400 audit(1723334118.644:999): avc: denied { mount } for pid=17059 comm="syz.4.3459" name="/" dev="ramfs" ino=69188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1130.119222][ T29] audit: type=1400 audit(1723334118.654:1000): avc: denied { execute } for pid=17059 comm="syz.4.3459" name="file0" dev="ramfs" ino=69189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1130.201867][ T29] audit: type=1400 audit(1723334118.654:1001): avc: denied { execute_no_trans } for pid=17059 comm="syz.4.3459" path="/71/file0/file0" dev="ramfs" ino=69189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1130.242552][ T29] audit: type=1400 audit(1723334118.684:1002): avc: denied { unmount } for pid=15773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1130.317995][ T29] audit: type=1400 audit(1723334118.984:1003): avc: denied { accept } for pid=17070 comm="syz.1.3463" lport=40901 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1130.420875][ T29] audit: type=1400 audit(1723334119.064:1004): avc: denied { write } for pid=17070 comm="syz.1.3463" lport=40901 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1130.928614][T17091] overlayfs: failed to resolve './file0': -2 [ 1131.267747][T17098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=17098 comm=syz.2.3467 [ 1131.970694][ T29] audit: type=1400 audit(1723334119.964:1005): avc: denied { create } for pid=17089 comm="syz.2.3467" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1132.074256][ T29] audit: type=1400 audit(1723334119.964:1006): avc: denied { read } for pid=17089 comm="syz.2.3467" name="file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1132.149639][ T29] audit: type=1400 audit(1723334119.964:1007): avc: denied { open } for pid=17089 comm="syz.2.3467" path="/37/file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1132.291272][ T29] audit: type=1400 audit(1723334120.954:1008): avc: denied { unlink } for pid=16024 comm="syz-executor" name="file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1132.721903][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.729559][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.756652][T17113] bridge0: entered allmulticast mode [ 1132.816980][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.824239][T17116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.831930][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.839291][T17116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.926550][T17116] bridge0: entered promiscuous mode [ 1133.459394][T16872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1133.530740][T16872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1133.612180][T16872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1133.720020][T16872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1134.072073][T17137] fuse: Unknown parameter 'fd-IL10UoʦGu ctRA1[tT!1d1~|$YgJ$x6e[G8Xc_ANo9Lg<"0x000000000000000700000000000000000000' [ 1135.101391][T17144] 9pnet_fd: Insufficient options for proto=fd [ 1135.145865][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.261162][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.365811][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.373112][ T8473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.505221][T15668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.512568][T15668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.883764][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.891368][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.959508][T17157] bridge0: left promiscuous mode [ 1136.214114][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.221370][T17160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.229105][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.236369][T17160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.293796][T17160] bridge0: entered promiscuous mode [ 1137.185561][T17188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1137.312197][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1137.312217][ T29] audit: type=1400 audit(1723334125.984:1013): avc: denied { write } for pid=17194 comm="syz.1.3490" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1137.644510][T17199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1137.720204][T17200] fuse: Bad value for 'rootmode' [ 1137.769571][ T5277] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1138.126209][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 1138.182514][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.441320][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.452340][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.465455][ T5277] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1138.532350][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.534018][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.585679][ T5277] usb 3-1: config 0 descriptor?? [ 1138.846761][ T29] audit: type=1400 audit(1723334127.514:1014): avc: denied { setopt } for pid=17210 comm="syz.4.3494" lport=34967 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1138.943089][T16872] veth0_vlan: entered promiscuous mode [ 1139.071822][T16872] veth1_vlan: entered promiscuous mode [ 1139.131945][ T5277] ryos 0003:1E7D:31CE.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.2-1/input0 [ 1139.283219][T16872] veth0_macvtap: entered promiscuous mode [ 1139.370379][ T5277] usb 3-1: USB disconnect, device number 28 [ 1139.383476][T16872] veth1_macvtap: entered promiscuous mode [ 1139.553159][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.606866][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.705929][T17226] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1139.715315][T17226] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1140.474883][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.516859][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.535972][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.547786][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.576228][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.629151][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.652831][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.683528][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.800981][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.885972][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.952210][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.976309][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.028040][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.066184][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.105686][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.140408][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.176448][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.204212][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.232364][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.258217][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.339861][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1141.444383][T16872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.486523][T16872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.546345][T16872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.569753][T16872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.719038][ T5226] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1141.728703][ T5226] Bluetooth: hci3: Injecting HCI hardware error event [ 1141.737967][ T5226] Bluetooth: hci3: hardware error 0x00 [ 1142.087158][T17263] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1143.357334][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.394665][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.534407][T17279] 9pnet_fd: Insufficient options for proto=fd [ 1143.585470][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.627723][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.796449][ T5226] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1145.239059][T17323] 9pnet_fd: Insufficient options for proto=fd [ 1145.858233][ T29] audit: type=1400 audit(1723334134.534:1015): avc: denied { bind } for pid=17335 comm="syz.0.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1146.349115][ T975] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe6 [ 1146.895697][ T29] audit: type=1400 audit(1723334135.564:1016): avc: denied { listen } for pid=17366 comm="syz.2.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1147.071920][ T29] audit: type=1400 audit(1723334135.744:1017): avc: denied { mount } for pid=17366 comm="syz.2.3533" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1147.130690][T17373] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3535'. [ 1147.165997][T17375] 9pnet_fd: Insufficient options for proto=fd [ 1147.253431][T17376] virtio-fs: tag <(null)> not found [ 1147.366317][ T29] audit: type=1400 audit(1723334136.034:1018): avc: denied { ioctl } for pid=17366 comm="syz.2.3533" path="socket:[71057]" dev="sockfs" ino=71057 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1147.462610][T17380] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1148.319708][T17408] overlayfs: failed to resolve './file1': -2 [ 1148.356334][ T29] audit: type=1400 audit(1723334137.024:1019): avc: denied { unmount } for pid=16024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1148.759177][T17419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1149.577296][T17430] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1149.798616][T17433] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3554'. [ 1151.438301][T17465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1152.360282][ T29] audit: type=1400 audit(1723334140.374:1020): avc: denied { read } for pid=17461 comm="syz.3.3565" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1152.730664][ T29] audit: type=1400 audit(1723334140.384:1021): avc: denied { open } for pid=17461 comm="syz.3.3565" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1152.788506][T17473] netlink: 'syz.1.3568': attribute type 9 has an invalid length. [ 1152.804966][T17478] overlayfs: failed to resolve './file1': -2 [ 1152.841742][T17473] netlink: 133944 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1152.851245][ T29] audit: type=1400 audit(1723334140.394:1022): avc: denied { ioctl } for pid=17461 comm="syz.3.3565" path="/dev/nvram" dev="devtmpfs" ino=625 ioctlcmd=0xaee0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1152.980681][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1153.047532][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1154.932086][ T29] audit: type=1400 audit(1723334143.604:1023): avc: denied { read write } for pid=17517 comm="syz.4.3582" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1154.967690][T10302] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1154.975092][T10302] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1155.031974][T10302] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1155.166690][ T29] audit: type=1400 audit(1723334143.604:1024): avc: denied { open } for pid=17517 comm="syz.4.3582" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1155.588487][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1155.916029][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1156.286452][T10302] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1156.578981][T10302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.652151][T10302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.702823][T10302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.761221][T10302] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1156.807415][T10302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.893184][T10302] usb 4-1: config 0 descriptor?? [ 1158.861499][T10302] usbhid 4-1:0.0: can't add hid device: -71 [ 1158.886542][T10302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1158.989171][T10302] usb 4-1: USB disconnect, device number 27 [ 1159.640442][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 1159.647841][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 1162.193830][T17631] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1164.746191][ T29] audit: type=1400 audit(1723334153.414:1025): avc: denied { create } for pid=17648 comm="syz.3.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1164.945424][ T29] audit: type=1400 audit(1723334153.604:1026): avc: denied { bind } for pid=17648 comm="syz.3.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1165.368713][T17668] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1165.852956][T17662] mmap: syz.1.3624 (17662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1165.993426][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1167.593273][T17698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1167.682816][T17698] netlink: 'syz.3.3646': attribute type 2 has an invalid length. [ 1167.723330][T17698] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1167.859597][T17702] 9pnet_fd: Insufficient options for proto=fd [ 1170.154388][T17733] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1170.192434][T17733] netlink: 'syz.1.3664': attribute type 2 has an invalid length. [ 1170.227425][T17733] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1170.730617][T17745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=17745 comm=syz.1.3669 [ 1172.236671][T17762] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1172.393823][T17773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1172.594284][T17775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1172.745762][T17777] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1172.780404][T17777] netlink: 'syz.4.3679': attribute type 2 has an invalid length. [ 1172.804071][T17777] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1173.286200][ T29] audit: type=1400 audit(1723334161.954:1027): avc: denied { bind } for pid=17788 comm="syz.4.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1173.341200][ T29] audit: type=1400 audit(1723334161.994:1028): avc: denied { setopt } for pid=17788 comm="syz.4.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1173.371450][T17789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1174.429409][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1174.673472][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.726189][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.766815][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1174.780614][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.807565][ T8] usb 1-1: config 0 descriptor?? [ 1175.289903][T17803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.327042][T17803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.400553][ T8] magicmouse 0003:05AC:0269.001F: item fetching failed at offset 6/7 [ 1175.441993][ T8] magicmouse 0003:05AC:0269.001F: magicmouse hid parse failed [ 1175.447148][T17812] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1175.474062][ T8] magicmouse 0003:05AC:0269.001F: probe with driver magicmouse failed with error -22 [ 1175.494104][T17812] netlink: 'syz.4.3693': attribute type 2 has an invalid length. [ 1175.535712][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1175.631802][T10302] usb 1-1: USB disconnect, device number 39 [ 1176.223940][T17828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1176.243330][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1176.776462][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1177.282798][T17850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=17850 comm=syz.0.3706 [ 1177.314944][ T5308] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1177.518248][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.556685][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.589058][ T5308] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1177.656184][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.703529][ T5308] usb 4-1: config 0 descriptor?? [ 1178.067058][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.073541][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.159645][ T5308] hid-multitouch 0003:1FD2:6007.0020: unknown main item tag 0x0 [ 1178.198458][ T5308] hid-multitouch 0003:1FD2:6007.0020: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1178.424532][T15556] usb 4-1: USB disconnect, device number 28 [ 1179.863061][T17886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=17886 comm=syz.3.3720 [ 1181.945289][T17903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1184.038468][T17930] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1184.116043][T17930] netlink: 'syz.0.3732': attribute type 2 has an invalid length. [ 1184.153962][T17930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1184.484757][T17934] netlink: 'syz.3.3733': attribute type 4 has an invalid length. [ 1184.530062][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1186.090205][ T29] audit: type=1400 audit(1723334174.764:1029): avc: denied { connect } for pid=17953 comm="syz.2.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1187.009198][T17975] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1187.037974][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1187.056272][T17975] netlink: 'syz.3.3745': attribute type 2 has an invalid length. [ 1187.092524][T17975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1187.324253][T17980] netlink: 'syz.3.3748': attribute type 4 has an invalid length. [ 1187.368444][T17981] syz.1.3749[17981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.368626][T17981] syz.1.3749[17981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.376265][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1187.424164][T17981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1187.542423][ T29] audit: type=1326 audit(1723334176.214:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17979 comm="syz.1.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad1b779f9 code=0x0 [ 1187.607945][T17981] syz.1.3749[17981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.608161][T17981] syz.1.3749[17981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.733032][T17991] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3752'. [ 1187.782425][T17991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3752'. [ 1188.557111][T18006] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1188.583114][T18006] netlink: 'syz.1.3758': attribute type 2 has an invalid length. [ 1188.606422][T18006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1188.874569][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1190.378438][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1191.864047][T18046] netlink: 'syz.4.3772': attribute type 2 has an invalid length. [ 1192.023198][T18049] __nla_validate_parse: 2 callbacks suppressed [ 1192.023219][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1192.106406][T10317] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1193.166335][T10317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.219372][T10317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.247720][T10317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1193.268166][T10317] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1193.320682][T10317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.355797][T10317] usb 2-1: config 0 descriptor?? [ 1193.379796][T18062] netlink: 'syz.4.3778': attribute type 4 has an invalid length. [ 1193.434622][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 1193.827969][T10317] usbhid 2-1:0.0: can't add hid device: -71 [ 1193.845739][T10317] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1193.896031][T10317] usb 2-1: USB disconnect, device number 39 [ 1194.096315][ T29] audit: type=1400 audit(1723334182.764:1031): avc: denied { read } for pid=18076 comm="syz.1.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1196.799059][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1196.874378][T18105] netlink: 'syz.4.3791': attribute type 4 has an invalid length. [ 1196.882482][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1198.357095][T15556] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1198.588646][T15556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.624139][T15556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.668044][T15556] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1198.701781][T15556] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1198.715535][T15556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.750024][T15556] usb 4-1: config 0 descriptor?? [ 1199.119000][T10317] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1199.329806][T10317] usb 3-1: config 0 has no interfaces? [ 1199.353781][T10317] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1199.410576][T10317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.468103][T10317] usb 3-1: config 0 descriptor?? [ 1200.370144][T15556] usbhid 4-1:0.0: can't add hid device: -71 [ 1200.402048][T15556] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1200.462020][T15556] usb 4-1: USB disconnect, device number 29 [ 1200.814783][T18146] ------------[ cut here ]------------ [ 1200.821178][T18146] kernel BUG at drivers/android/binder.c:1173! [ 1200.827833][T18146] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 1200.834802][T18146] CPU: 1 UID: 0 PID: 18146 Comm: syz.1.3800 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1200.845553][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1200.855602][T18146] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 1200.862305][T18146] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 1200.882022][T18146] RSP: 0018:ffffc900034ef920 EFLAGS: 00010287 [ 1200.888097][T18146] RAX: 0000000000001c47 RBX: ffff888016795310 RCX: ffffc9000b634000 [ 1200.896077][T18146] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 1200.904132][T18146] RBP: ffffc900034ef9b0 R08: 0000000000000004 R09: 0000000000000000 [ 1200.912198][T18146] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027b73400 [ 1200.920158][T18146] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1200.928118][T18146] FS: 00007f5ad298d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1200.937033][T18146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.943604][T18146] CR2: 0000001b31c00ff8 CR3: 000000005f08e000 CR4: 00000000003506f0 [ 1200.951564][T18146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1200.959612][T18146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1200.967743][T18146] Call Trace: [ 1200.971005][T18146] [ 1200.973921][T18146] ? show_regs+0x8c/0xa0 [ 1200.978204][T18146] ? die+0x36/0xa0 [ 1200.981921][T18146] ? do_trap+0x232/0x430 [ 1200.986160][T18146] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 1200.991995][T18146] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 1200.997802][T18146] ? do_error_trap+0xf4/0x230 [ 1201.002467][T18146] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 1201.008262][T18146] ? handle_invalid_op+0x34/0x40 [ 1201.013189][T18146] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 1201.018983][T18146] ? exc_invalid_op+0x2e/0x50 [ 1201.023737][T18146] ? asm_exc_invalid_op+0x1a/0x20 [ 1201.028967][T18146] ? binder_inc_ref_for_node+0x1050/0x11f0 [ 1201.034761][T18146] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 1201.040643][T18146] ? __pfx___might_resched+0x10/0x10 [ 1201.045945][T18146] binder_thread_write+0x248d/0x3ac0 [ 1201.051223][T18146] ? __pfx_binder_thread_write+0x10/0x10 [ 1201.056844][T18146] ? find_held_lock+0x2d/0x110 [ 1201.061619][T18146] ? __might_fault+0x13b/0x190 [ 1201.066380][T18146] ? binder_debug+0xdf/0x1b0 [ 1201.071010][T18146] ? __pfx_binder_debug+0x10/0x10 [ 1201.076131][T18146] ? __might_fault+0xe3/0x190 [ 1201.080794][T18146] binder_ioctl+0x2250/0x6b10 [ 1201.085466][T18146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1201.091373][T18146] ? do_vfs_ioctl+0x515/0x1ad0 [ 1201.096162][T18146] ? __pfx_binder_ioctl+0x10/0x10 [ 1201.101186][T18146] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 1201.107740][T18146] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 1201.114224][T18146] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1201.121059][T18146] ? selinux_file_ioctl+0x180/0x270 [ 1201.126241][T18146] ? selinux_file_ioctl+0xb4/0x270 [ 1201.131336][T18146] ? __pfx_binder_ioctl+0x10/0x10 [ 1201.136367][T18146] __x64_sys_ioctl+0x193/0x220 [ 1201.141123][T18146] do_syscall_64+0xcd/0x250 [ 1201.145618][T18146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.151505][T18146] RIP: 0033:0x7f5ad1b779f9 [ 1201.155910][T18146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.175505][T18146] RSP: 002b:00007f5ad298d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.183931][T18146] RAX: ffffffffffffffda RBX: 00007f5ad1d06130 RCX: 00007f5ad1b779f9 [ 1201.191898][T18146] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1201.200119][T18146] RBP: 00007f5ad1be58ee R08: 0000000000000000 R09: 0000000000000000 [ 1201.208078][T18146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.216038][T18146] R13: 0000000000000000 R14: 00007f5ad1d06130 R15: 00007ffc34185d88 [ 1201.223996][T18146] [ 1201.227004][T18146] Modules linked in: [ 1201.232934][T18146] ---[ end trace 0000000000000000 ]--- [ 1201.239691][T18146] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 1201.246260][T18146] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 1201.266151][T18146] RSP: 0018:ffffc900034ef920 EFLAGS: 00010287 [ 1201.272229][T18146] RAX: 0000000000001c47 RBX: ffff888016795310 RCX: ffffc9000b634000 [ 1201.280249][T18146] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 1201.288231][T18146] RBP: ffffc900034ef9b0 R08: 0000000000000004 R09: 0000000000000000 [ 1201.297420][T18146] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027b73400 [ 1201.305383][T18146] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1201.314253][T18146] FS: 00007f5ad298d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1201.323214][T18146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.329901][T18146] CR2: 0000001b31c00ff8 CR3: 000000005f08e000 CR4: 00000000003506f0 [ 1201.337988][T18146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.346032][T18146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1201.354014][T18146] Kernel panic - not syncing: Fatal exception [ 1201.360175][T18146] Kernel Offset: disabled [ 1201.364484][T18146] Rebooting in 86400 seconds..